Information Security Engineer (Cybersecurity)

TL;DR

Information Security Engineer (Cybersecurity): Protecting infrastructure, cloud, software, and data against threats with an accent on security operations, engineering, governance, and compliance. Focus on managing SOC, conducting vulnerability assessments, incident response, and integrating Microsoft security tools like Defender, Purview, and Entra ID.

Location: Birmingham (Hybrid Working)

Company

Leading independent, employee-owned organisation in cost management, quantity surveying, project management, and advisory services for the built environment sector with global reach.

What you will do

• Manage day-to-day security operations, act as primary contact for third-party SOC, and ensure alerts and incidents are remediated.
• Analyse logs and threats, lead incident investigations, conduct vulnerability assessments, and oversee penetration tests with remediation.
• Configure and integrate Microsoft security tools (Purview, Defender, M365, Entra ID, Azure), monitor identity and access management.
• Support governance, audits, compliance with standards like ISO 27001, NIST 800-171, UK GDPR, and secure software onboarding.
• Develop security awareness initiatives, phishing simulations, training, and recommend improvements against emerging threats.

Requirements

• Extensive experience with M365, Microsoft Purview, Defender, Azure security ecosystems, DLP, and third-party SOC/SIEM.
• Background in penetration tests, incident response, vulnerability management, NIST 800-171, ISO 27001 environments.
• Certifications: CEH, CISSP, Security+, relevant Microsoft (SC-900, SC-200, AZ-140); ability to obtain Security Clearance (essential).
• Excellent interpersonal, organisational skills; professional, confidential, motivated, adaptable.

Nice to have

• Exposure to secure software development practices.

Culture & Benefits

• Hybrid and flexible working, family-friendly policies, competitive salary, generous holiday with option to buy extra days.
• Private healthcare, dental, eyecare, gym membership, cycle to work, wellness options.
• Continuous learning, mentoring schemes, professional subscriptions, season ticket loan.
• Inclusive culture, teamwork, social events, charity activities, diverse projects across sectors and regions.